fix(clustertool): dont install ensure-digest kyverno policy by default, as it doesn't work with all operators

clustertool/embed/generic/kubernetes/core/kyverno-policies/app/ensure-digest.yaml

@@ -1,3 +1,7 @@
+## This Can be enabled in the kustomization.yaml file.
+## Please note not every chart or application is compatible with this behavior
+## Primarily operators spinning their own pods, might include conflicting validation
+## Add manual exclusions where needed
 apiVersion: kyverno.io/v1
 kind: ClusterPolicy
 metadata:

clustertool/embed/generic/kubernetes/core/kyverno-policies/app/kustomization.yaml

@@ -3,4 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - schematic-to-pod.yaml
-  - ensure-digest.yaml
+  # - ensure-digest.yaml